Reply to post:

I've looked at the Docker image repos, and I don't see any mention of image signatures. If they aren't signing images, they should be, like Linux repos do.

I hope so, otherwise COMDEDY GOLD events are sure to happen.